Privacy Policy

Bell AI Ltd is a company incorporated in England and Wales (company number 15249179) with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom. We are registered with the UK Information Commissioner's Office ("ICO"). For privacy enquiries, contact privacy@getbell.ai.

How this policy applies depends on how you use the Service:

• Individual users. Where you sign up for the Service in a personal capacity, Bell AI is the controller of your personal data and this policy applies in full.
• Business customers. Where you use the Service under an account provisioned by your employer or another organisation, that organisation is the controller of Service Content and Bell AI acts as its processor under our Data Processing Agreement. The organisation's own privacy notice governs that processing; this policy applies to data for which we remain controller (such as account, billing and security data).

Under the UK GDPR we must have a legal basis for each use of personal data:

What we never do. We never sell personal data. We never use Service Content for advertising, behavioural profiling for marketing, or credit decisions. We never use Service Content to train generalised AI or machine-learning models. Automated processing by Bella is carried out to perform our contract with you; actions with legal or similarly significant effects are not taken without human involvement available on request (Art. 22 UK GDPR).

If you connect a Google account, the Service accesses Google user data through Google APIs, including restricted Gmail scopes. This section explains exactly what we access, why, and the limits we operate under.

5.1 Scopes we request and why

We request the minimum scopes necessary for these features. If you decline a scope, the corresponding feature is unavailable, but you may still use the rest of the Service where technically possible.

5.2 Limited Use disclosure

Bell AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with the Limited Use requirements:

• We only use Google user data to provide and improve the user-facing features of the Service that are prominent in its interface — reading, triaging, drafting, organising, sending and following up on your email, and the related personalisation described in this policy.
• We do not transfer Google user data to third parties except: (a) to provide or improve those user-facing features, using sub-processors bound by this policy and the safeguards in section 8; (b) for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) as part of a merger, acquisition or sale of assets, after providing you with prominent prior notice.
• We do not use Google user data for advertising, including retargeting, personalised or interest-based advertising, and we do not allow any third party to do so.
• We do not allow humans to read your Google user data, except: (a) with your affirmative agreement for specific messages (for example, where you ask our support team to investigate an issue in a specific thread); (b) where necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymised and is used only for internal operations.
• We do not use Google user data — including Gmail content — to develop, improve or train generalised artificial intelligence or machine-learning models. Google user data is processed by AI models solely to deliver the user-facing features above, on a per-request basis, and our AI sub-processors are contractually prohibited from retaining it or training on it (see section 6).

5.3 Retention and revocation of Google user data

You can disconnect your Google account at any time in the Service settings or by revoking Bell AI's access at myaccount.google.com/permissions. On disconnection or account deletion, we delete Google user data from our systems within 30 days, except where retention is required by law, and we instruct sub-processors to do the same. Cached or backup copies are purged within our standard backup cycle of 35 days.

Bella is powered by third-party large language models. When Bella performs a task, the relevant Service Content is transmitted to an AI sub-processor solely to generate the output you requested. Our AI sub-processors are bound by contractual terms under which they:

• may not use your data to train, improve or develop their models or any other models;
• operate under zero or minimal retention, deleting inputs and outputs promptly after processing; and
• may not use your data for any purpose other than returning the requested output to Bell AI.

Current AI sub-processors include Anthropic (Claude) and Google (Gemini). Personalisation Data is derived and applied only within your own account; it is never pooled across customers and never used to build models that serve other users.

If you connect a Microsoft account (Outlook.com or Microsoft 365), the Service accesses Microsoft user data through the Microsoft Graph API. This section explains exactly what we access, why, and the limits we operate under. Our access to and use of data obtained through Microsoft APIs complies with the Microsoft APIs Terms of Use and the Microsoft identity platform policies.

7.1 Scopes we request and why

We request the minimum scopes necessary for these features. If you decline a scope, the corresponding feature is unavailable, but you may still use the rest of the Service where technically possible.

7.2 Limited use of Microsoft user data

We apply the same limited-use commitments to Microsoft user data as we do to Google user data:

• We only use Microsoft user data to provide and improve the user-facing features of the Service — reading, triaging, drafting, organising, sending and following up on your email, and the related personalisation described in this policy.
• We do not transfer Microsoft user data to third parties except: (a) to provide or improve those user-facing features, using sub-processors bound by this policy and the safeguards in section 8; (b) for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) as part of a merger, acquisition or sale of assets, after providing you with prominent prior notice.
• We do not use Microsoft user data for advertising, including retargeting, personalised or interest-based advertising, and we do not allow any third party to do so.
• We do not allow humans to read your Microsoft user data, except: (a) with your affirmative agreement for specific messages (for example, where you ask our support team to investigate an issue in a specific thread); (b) where necessary for security purposes, such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymised and is used only for internal operations.
• We do not use Microsoft user data — including Outlook content — to develop, improve or train generalised artificial intelligence or machine-learning models. Microsoft user data is processed by AI models solely to deliver the user-facing features above, on a per-request basis, and our AI sub-processors are contractually prohibited from retaining it or training on it (see section 6).

7.3 Retention and revocation of Microsoft user data

You can disconnect your Microsoft account at any time in the Service settings or by revoking Bell AI's access at account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work or school accounts). On disconnection or account deletion, we delete Microsoft user data from our systems within 30 days, except where retention is required by law, and we instruct sub-processors to do the same. Cached or backup copies are purged within our standard backup cycle of 35 days.

We share personal data only with:

• Sub-processors who help us run the Service — hosting and infrastructure (e.g. Supabase / AWS / GCP), AI model providers (section 6), payment processing (e.g. Stripe), email delivery, and customer support tooling. Each is bound by a written contract imposing confidentiality, security and data-protection obligations no less protective than this policy, and — for Google user data — the Limited Use requirements. A current sub-processor list is available on request.
• Professional advisers and authorities where required by law, court order, or to establish, exercise or defend legal claims, and where we are legally permitted we will notify you before disclosing Service Content.
• A successor entity in a merger, acquisition, financing or sale of assets, in which case this policy continues to apply to your data and we will give you prominent prior notice of any change of controller or material change of practice, including — for Google user data — the notice required by the Limited Use requirements.

We do not share personal data with advertising networks or data brokers, and we do not permit analytics providers to access Service Content.

We are UK-based, but some sub-processors process data outside the UK, including in the United States. Where personal data is transferred out of the UK or EEA, we rely on: (a) UK adequacy regulations (including, for the US, the UK Extension to the EU–US Data Privacy Framework where the recipient is certified); (b) the ICO's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or (c) the EU Standard Contractual Clauses for EEA-origin data — in each case with supplementary measures where required. Copies of the relevant safeguards are available on request.

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS 1.2+) and at rest (AES-256), OAuth-based mailbox access (we never see or store your mailbox password), role-based access controls, least-privilege production access, logging and monitoring, and vendor security review. No system is perfectly secure; if a personal data breach occurs that is likely to result in a risk to your rights, we will notify the ICO within 72 hours and affected users without undue delay, as required by Articles 33–34 UK GDPR.

Subject to conditions in the UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict processing; data portability; object to processing based on legitimate interests (including direct marketing, which we will always stop on objection); withdraw consent at any time where consent is the basis; and not be subject to solely automated decisions with legal or similarly significant effects. To exercise any right, contact privacy@getbell.ai. We respond within one month (extendable by two months for complex requests, with notice). We will verify your identity before acting. You also have the right to complain to the ICO (ico.org.uk; +44 303 123 1113) or, if you are in the EEA, to your local supervisory authority — though we would welcome the chance to resolve your concern first.

The Service is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

Our websites use strictly necessary cookies and, with your consent, analytics cookies. We do not use advertising cookies.

We may update this policy from time to time. For material changes — including any change to how we handle Google user data — we will give you prominent advance notice in the Service or by email, and where required by law we will seek your consent. The "Last updated" date shows the current version; prior versions are available on request.

Bell AI Ltd, 128 City Road, London, EC1V 2NX, United Kingdom — privacy@getbell.ai.